Hackers vs. Cybercrook - SD-card access, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Hackers vs. Cybercrook published at the 'play' market has multiple vulnerabilities...

Security News This Week: Oh Good, Hackers Beat Two-Factor to Rob Bank Accounts

Each weekend we round up the news stories that we didn't break or cover in depth but that still deserve your attention. The post Security News This Week: Oh Good, Hackers Beat Two-Factor to Rob Bank Accounts appeared first on WIRED...

Hackers Hit Macron With Huge Email Leak Ahead of French Election

The campaign of French presidential candidate Emmanuel Macron confirms it's been the target of a successful hacking operation. The post Hackers Hit Macron With Huge Email Leak Ahead of French Election appeared first on WIRED...

Carbanak Attackers Devise Clever New Persistence Trick

Hackers behind the Carbanak criminal gang have devised a clever way to gain persistence on targeted systems to more effectively pull off financially motivated crimes. The technique involves creating a bogus instance of a Microsoft Windows app compatibility feature. On Wednesday, Mandiant, FireEye...

Watch Hackers Sabotage an Industrial Robot Arm

Researchers were able to take control of a 220-pound robotic arm to damage the products it manufactures---or the person that operates it. The post Watch Hackers Sabotage an Industrial Robot Arm appeared first on WIRED...

Warning! Don't Click that Google Docs Link You Just Received in Your Email

Did someone just share a random Google Doc with you? First of all — Do not click on that Google Doc link you might have just received in your email and delete it immediately — even if it's from someone you know. I, my colleagues at The Hacker News, and even people all around the Internet,...

Apple Revokes Certificate Used By OSX/Dok Malware

Apple revoked a legitimate developer certificate used by hackers behind malware dubbed OSX/Dok, which was able to eavesdrop on secure HTTPS traffic of infected systems. On Sunday, Apple also rolled out an update to its XProtect built-in antimalware software to fend off existing and upcoming...

Joomla JGrid 4.44 SQL Injection

Exploit Title: Joomla Component JGrid 4.44 - SQL Injection Exploit Author: Persian Hack Team Discovered by : Mojtaba MobhaM Mojtaba Kazemi Vendor Home : https://extensions.joomla.org/extensions/extension/core-enhancements/data-reports/jgrid/ Home : http://persian-team.ir/ Telegram Channel AND Dem...

Joomla JGrid 4.44 SQL Injection Vulnerability

Joomla JGrid component version 4.44 suffers from a remote SQL injection vulnerability. Exploit Title: Joomla Component JGrid 4.44 - SQL Injection Exploit Author: Persian Hack Team Discovered by : Mojtaba MobhaM Mojtaba Kazemi Vendor Home :...

An Obscure App Flaw Creates Backdoors In Millions of Smartphones

Researchers at the University of Michigan expose how an obscure feature of thousands of apps can give hackers remote access into your phone's most sensitive guts. The post An Obscure App Flaw Creates Backdoors In Millions of Smartphones appeared first on WIRED...

The Time Has Arrived to Embrace Hackers

BOSTON—More than ever, hackers are getting a welcoming embrace from law enforcement, governments and business. Bug bounties and vulnerability disclosure programs are becoming the norm across industry, and hackers are no longer universally viewed as a pariah. Simultaneously, however, groups such a...

Hack'em If You Can — U.S. Air Force launches Bug Bounty Program

With the growing number of data breaches and cyber attacks, a significant number of companies and organizations have started Bug Bounty programs for encouraging hackers and bug hunters to find and responsibly report vulnerabilities in their services and get rewarded. Now, following the success of...

Joomla jDBexport 3.2.10 Cross Site Scripting / Path Disclosure Vulnerabilities

Joomla jDBexport component version 3.2.10 suffers from cross site scripting and path disclosure vulnerabilities Exploit Title: Joomla Component jDBexport 3.2.10 - Cross-site scripting / Full Path Disclosure Exploit Author: Persian Hack Team Discovered by : Mojtaba MobhaM Mojtaba Kazemi Home :...

Joomla MyPortfolio 3.0.2 SQL Injection

Exploit Title: Joomla Component Myportfolio 3.0.2 - SQL Injection Exploit Author: Persian Hack Team Discovered by : Mojtaba Kazemi Mojtaba MobhaM Home : https://extensions.joomla.org/extensions/extension/directory-a-documentation/portfolio/myportfolio/ Home : http://persian-team.ir/ Telegram...

NSA's DoublePulsar Kernel Exploit In Use Internet-Wide

If you’re on a red team or have been on the receiving end of a pen-test report from one, then you’ve almost certainly encountered reports of Windows servers vulnerable to Conficker MS08-067, which has been in the wild now for nearly 10 years since the bug was patched. A little more than two weeks...

Joomla! Component Myportfolio 3.0.2 - pid SQL Injection

Joomla! Component Myportfolio 3.0.2 - pid SQL Injection Exploit Title: Joomla Component Myportfolio 3.0.2 - SQL Injection Exploit Author: Persian Hack Team Discovered by : Mojtaba Kazemi Mojtaba MobhaM Home :...

Office discovered zero vulnerabilities hackers can use the Word document to install malicious software-vulnerability warning-the black bar safety net

According to foreign media reports, recently a period of time, you when opening a Word document may have to be careful because the security company MCAfee researchers in Microsoft Office software found in a zero vulnerabilities, hackers can use it quietly in your computer system to install...

Not Just Criminals, But Governments Were Also Using MS Word 0-Day Exploit

Recently we reported about a critical code execution vulnerability in Microsoft Word that was being exploited in the wild by cyber criminal groups to distribute malware like Dridex banking trojans and Latentbot. Now, it turns out that the same previously undisclosed vulnerability in Word...

Securing Driverless Cars From Hackers Is Hard. Ask the Ex-Uber Guy Who Protects Them

In his Uber exit interview, top car hacker Charlie Miller warns of the dangers of insecure autonomous vehicles. The post Securing Driverless Cars From Hackers Is Hard. Ask the Ex-Uber Guy Who Protects Them appeared first on WIRED...

Hermosoft CMS Admin Page Bypass Vulnerability

Exploit for php platform in category web applications Exploit Title : Hermosoft CMS Admin Page ByPass Exploit Author : xBADGIRL21 Dork: intext:Website Designed by Hermosoft, Dubai 2017. All rights reserved Tested on: Windows skype:xbadgirl21 Date: 11/04/2017 video Proof :...